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An introduction to Algebraic Geometry codes 

Carlos Munuera and Wilson Olaya-Leon 


Abstract. We present an introduction to the theory of algebraic geometry 
codes. Starting from evaluation codes and codes from order and weight func¬ 
tions, special attention is given to one-point codes and, in particular, to the 
family of Castle codes. 


1. Introduction 

Let Fq be a finite field with q elements. A linear code of length n and dimension 
k over Fg, a [n,k] code for short, is a fc-dimensional linear space C C F'h The 
minimum distance of C is by definition 

d = min{d(u, v) : u, v S C, u 7 ^ v} = min{wf(u) : u GC, UT^O} 

where d stands for the Hamming distance, (i(u, v) = ff{i : Ui Vi\, and wt 
for the Hamming weight, wt{\i) = d(u, 0). A “good code” is one that optimizes 
simultaneously the ratios d/n and k/n. 

The problem of finding good codes is central to the theory of error correcting 
codes. For many years coding theorists have addressed this problem by adding 
more and more algebraic and combinatorial structure to C. In particular, codes 
with excellent properties have been obtained by using techniques and resources 
from algebra and algebraic geometry, the so-called algebraic geometry codes. Most 
of these techniques are highly specialized and the study of the obtained codes is very 
elegant but in general difficult. Indeed, given such a code, often it is not possible 
to calculate its exact minimum distance, and sometimes even its dimension. 

In this chapter we present a short introduction to algebraic geometry codes. 
We use the order bounds on the minimum distance as a motivation to introduce 
evaluation and algebraic geometry codes. Then we center our attention on one- 
point codes, and later on the family of Castle codes. As a result of this orientation 
we can overview quickly much of the basic theory. However we warn the reader 
that many important parts and facts have been omitted. For a complete treatment 
we refer to the excellent texts m and |45) . The canonical reference for general 
error correcting codes is the very complete book [30] (although it does not contain 
the theory of AG codes). 
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2. The order bounds on the minimum distance 

2.1. Bounds. As noted above, computing the true minimum distance d of a 
linear code C is in general a difficult problem (it is an NP-complete problem, see 
m)- Often we have to settle for an estimate of d based on some available lower 
bound. And then evaluate the quality of our parameters by comparing them with 
several upper bounds. Usually upper bounds are general, valid for all linear codes. 
Let us show an important example. 

Theorem 2.1 (Singleton bound). The parameters n^k,d of a linear code C 
verify k + d < n + 1. 

Proof. Let tt : C —>■ be the projection obtained by deleting d—l fixed 

coordinates. Since each codeword of C has at least d nonzero coordinates, tt is an 
injective linear map, hence dim(7r(C)) = k and thus k < n — d + 1. □ 

Codes reaching equality in the Singleton bound are called maximum distance 
separable (or MDS) codes. 

Lower bounds on the minimum distance are designed to be applied to some 
particular families or constructions of codes. Significant examples could be BCH 
and Goppa bounds (BCH and algebraic geometry codes respectively). Besides 
uniform ones, other interesting lower bounds are of order type. They are based on 
obtaining different estimates for different subsets of codewords. Such a bound is 
successful if for each subset we can find estimates better than a uniform bound for 
all codewords. In this chapter we shall explain two bounds of this type. 

2.2. Fg-algebras. Throughout this chapter, an ¥q-algebra will be a commuta¬ 

tive ring R with a unit, containing F^ as a subring. Then i? is a vector space over F^. 
The most interesting examples of Fg-algebras are the polynomial ring in m variables 
Fq[Ai,..., Xm] and its quotients Fg[Ai,..., where / is an ideal. Other im¬ 

portant example is F”. Since Fg is naturally isomorphic to {(A,..., A)|A G Fg}, it 
turns out that Fg is also an algebra with the coordinate wise product *, 

(m1,...,M„) * {vi,...,Vn) = {uiVi, . . . ,UnVn). 

Note that (A,..., A) * (mi, ..., Un) = A(ui,..., u„) hence the ring and vector space 
structures on F” are fully compatible. 

2.3. The Andersen-Geil bound. Let B = {bi,...,b„} be a basis of Fg. 
We consider the linear codes Cq = (0), and for fc = 1,..., n, 

— (bl,...,b/,;). 

Cfe is a [n, k] code. Associated to the chain Co = (0) c Ci C • • • C C„ = F”, we 
define the sorting map pB : F” —>• {0,..., n} by pb(v) = min{r : v G C^}. 

Lemma 2.2. Let vi,..., G Fg. Then 

(1) pb(vi-I--— h v„i) < max{pg(vi),...,/9g(vm)}. If there exists j such that 

< Psi'^j) for all i ^ j, then equality holds. 

(2) //V 7 ^ 0 then there exist Ai,..., Apg(v) G Fg with \pg(y) 0 such that 
V = Aibi -b • • • -I- Apg(v)bpg(v) • 

(3) dim((vi,..., v^)) > #{pb(vi), ... ,pe(vm)}. Conversely, i/UCF” is a 
linear subspace of dimension m, then there exists a basis {ui,..., u^} of 
D such that #{pb(ui), ..., psi^m)} = rn. 
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Proof. (1) Both statements follow from the linear structure of our codes. (2) 
follows from (1).(3) Assume #{pe(vi),... ,pB(vm)} = t andpB(vi) < • • • < psiyi)- 

If AiVi H-h AtVt = 0 then 0 = pb(0) = pb(AiVi H-h AtV*) = max{pB(vi) : 

\i ^ 0}. By (1) this implies Ai = • • • = At = 0. Conversely write Di = D r\ Ci. 
For all i = 1,... ,n, it holds that Di = © (D fl (bt)), hence dim(iAi_i) < 

dim(L)t) < dim(iAi_i) + 1 and the last inequality is an equality precisely m times. 
If Di ^ A-i, take a vector e A \ A-i- Then #{pb(ui), .. .,PB{um)} = m 
and {ui,..., Um} is a basis of D. □ 

We consider in the partial order (r, s) -< (i,j) if and only ii r < i, s < j and 
(r, s) 7 ^ ihj)- A pair of nonzero vectors (u,v) is called well-behaving (with respect 
to the basis B) if for any pair (b^jb^) such that (r, s) ^ (pb(u), pb(v)) it holds 
that pB(br * bs) < pb{u * v). For i = 1,... ,n, define the set 


Ai = {bj G S : (bi, bj) is well-behaving}. 


Let V G F^, V 7 ^ 0. According to Lemma 12.21 (2), we can write v as a linear 

combination v = Aibi -|-+ Apg(v)bpg(v) with Apg(v) ^ 0. Then, if b^ G 

we have 


Pb(v) 



Proposition 2.3. Let v g F^. Ifv^O then wt{v) > #Apg(v). 

Proof. Consider the space P(v) = {u G F” : supp(u) C supp(v)} = {u * v : 
u G F^}. Then wt{v) = dim(P(v)) > dim((v * bi,..., v * b„)) > ^{pi^(v * 
bi),... ,Pb(v * b„)} > #{pb(v * bj) : b^ G Apg(^)} = #{pB(bpe(v) * b^) : b^ G 

■^pe(v)} “ ^-^pb(v)' O 

This result directly leads to the following bound. 

Theorem 2.4. For k = 1,. .. ,n, the minimum distanee of Ck satisfies 


d{Ck) > min{#Ar : r = I,..., fc}. 


The inequality stated in the above theorem is called the Andersen-Geil bound 
on the minimum distanee of the primary code Ck, or order bound with respect to 
the basis B on the minimum distanee of the primary code Ck- Note that the sets 
Ar depend on the basis B. So the bound depends on B as well. This bound can 
be applied to an arbitrary linear code C, just by including it into any increasing 
chain of codes Ci C • • • C Ck-i C C C Ck+i C ■ ■ ■ <Z Cn = F^. However the best 
results are obtained when all the codes in the chain have been obtained by the 
same construction. This is the case of some types of codes arising from algebraic 
geometry. 

A similar bound can be stated for codes Cj = ({b^ : i G /}) where I is an 
arbitrary subset of {I,...,n} (without changing the order on the basis elements 
nor the map p). We leave this generalization as an exercise to the reader (or see 


m 


2.4. The Feng-Rao bound on the minimum distance of dual codes. 

Given a linear [n, k] code C, its dual code is defined as 


= {v G F” : c • V = 0 for all c G C} 
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where • denotes the usual inner product in F” 

n 

u ■ V = y^u^vi. 

Then is a linear [n, n — k] code. By using similar ideas to those explained in the 
previous subsection, we can give a bound on the minimum distance of dual codes. 
Let B = {bi,..., b„} be a basis of F” and consider the chain of dual codes 

= (0) C C • • • C = F”. 

Given a vector u G F^, define the syndromes of u 

Si = si(u) = bi • u,..., = Sn(u) = b„ • u 

or equivalently Bu^ = s^, where s = (si,..., s„) and B is the matrix whose rows 
are the vectors bi,..., b„. Then u G C;|- if and only if si = • • • = s^ = 0 and 

Sr+i 0. Consider also the two dimensional syndromes 

Sij = (bi * hj) • u, l<ij <n. 

Let S be the matrix S = (s^), 1 < i,j < n. Note that this matrix can be written 
also as S = BD(u)B^, where D(u) is the diagonal matrix with u in its diagonal. 
Since B has full rank, we have rank(S) = rank(D(u)) = wt(u). 

Lemma 2.5. Let u G C^. 

(1) Sij = 0 for all (i,j) such that * bj) < r. 

(2) If u ^ then Sij 0 for all {i,j) such that psO^i * bj) = r + 1. 

Proof. As u g we have si = ••• = s^ = 0. (1) If pe(bi * bj) < r 
then, according to Lemma [2. 21 21. bi * b^ = Aibi + • • • + A^b^r and s^- = AiSi + 
• • • + XrSr = 0. (2) If u ^ then s^+i ^ 0. When pe(bi * b^) = r + 1, 
we have bi * hj = Aibi + ••• + A^b,. + Ar+ibj._|_i with A^+i ^ 0. Then Sij = 

AiSi + ■ • • + XrSr + Ar+lSr+1 = Ay.-|-iSr+l 0. D 


For r = 0,..., n — 1, define the sets 


= {(*) j) : (bi,bj) is well-behaving and pe(bi * bj) = r -I- 1}. 

Let Nj. = {(zi, ji),..., (zt) jt)}- The well-behaving property implies that all z’s 
in this set are distinct. Write zi < Z 2 < • • • < z*. By symmetry, jt = ii,..., ji = z*, 
hence jt < ■ ■ ■ < ji- Let be the submatrix of S 




■■■ 




Lemma 2.6. Ifu€Cf-\ then Sr has full rank. 


Proof. Let {I, m) be an entry in the anti-diagonal of S^. Then I = ih,m = jh 
for some h and sim 7 ^ 0 by Lemma l2.5l 2l. If {l,m) is above the anti-diagonal, then 
I = ih,m < jh, hence pB{hi*hm) < Psi^in = r-|-I. Thus Si^ = 0 by Lemma 

12.51 11 and det(Sr) 7 ^ 0 . □ 

As a consequence of this lemma, if u G \ we have wt{u) = rank(S) > 
rank(Sr) = The Feng-Rao or dual order bound on the minimum distance of 

with respect to the basis B states the following 
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Theorem 2.7. For k = 0,1,... ,n — 1, the minimum distance of satisfies 
d{C^) > : r = k,... ,n — 1}. 

As in case of primary codes, this bound depends on the choice of the basis B. 

3. Evaluation codes and order domains 

The theory introduced in the previous section directly leads to the problem 
of finding basis B producing good codes. This subject will be addressed in this 
section. 

Let i? be a Fg-vector space and let <I> be a linear map $ : i? —>■ F^. For every 
linear subspace L Q R we have a linear code 

C(L) = <I>(L) 

and its dual 

C(L)^ = {v G F” : c • V = 0 for all c G C(L)}. 

If we consider a basis {/i,/ 2 ,...} of R, we get a chain of linear codes, Cr = 

(<i>(/i),..., $(/r)), r = 1,2,_When $ is surjective, then there exists r such that 

Cr = F^, and the order bounds can be applied to obtain estimates on the minimum 
distance of these codes. 

3.1. Evaluation codes. The most interesting case of the above construction 
arises when i? is a set of functions that can be evaluated at points Pi,..., P„ 
belonging to a geometrical object X. Set P = {Pi,...,P„} and let $ = ev-p : 
P —>■ Fg defined by evp{f) = (/(Pi),...,/(P„)). The obtained codes are called 
evaluation codes. 

Example 3.1 (Reed-Muller codes). To give a concrete example take the F^- 
algebra R = ¥q [Xi,, X^] and let P be the set of all n = points Pi,..., P„ 
in F™. The evaluation map 

evp : Fq[Xi,..., Xm] F^ 

evvif) = (/(Pi), • ■. ,/(P„)), is linear and verifies {fg){P) = f{P)*g{P), so it is a 
morphisms of F^-algebras. To see surjectivity, given a point P = (oi,..., am) G F™, 
the polynomial 

m 

fp=]i n - “) 

^=1 oc^¥q.,oc^ai 

verihes fp{P) 0 and fp{Q) = 0 for all Q ^ P. Thus the vectors {evp{fp) : 
P G F™} span F^. Consider the basis {/i, / 2 , • • ■ } of Fg[Xi,..., Xm] consisting 
of all monomials ordered according to a graded order (for example the graded 
lexicographic order: first compare degrees; then apply lexicographic order to break 
ties). Then we obtain an increasing chain of codes Ci C C 2 C ..., where 

C, = evp{{fi,...,fi)). 

Among these codes, particular interest have the ones of the form TZAi{r,m) = 
evp{¥q[Xi,..., Xm\{r)), where F^jAi,..., Xm\(r) stands for the linear space of all 
polynomials of degree at most r. They are called Reed-Muller codes. The same 
construction can be done by considering homogeneous polynomials and evaluat¬ 
ing them at points in the projective space. In this case we obtain the so-called 
Projective Reed-Muller codes. 
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Reed Muller codes are important from both theoretical and practical reasons 
and much is known about them. For example, in 1972 a Reed-Muller code was used 
by Mariner 9 to transmit black and white photographs from Mars. The case m = 1 
is particularly simple and interesting, so it deserves a special attention. 

Example 3.2 (Reed-Solomon codes). Let R = F,j[X] and consider the basis 
{1, X, X^,...}. Let V be the set of points in the affine line Fg. The obtained 
evaluation codes, called Reed Solomon codes, are widely used (CD players, bar 
codes, etc.). Their parameters are easy to obtain: as a polynomial of degree r has 
at most r roots, for r < n the code eu-p((l, X,..., X'")) has length n = q, dimension 
k = r + 1 and minimum distance d = n — r (it is a MDS code). 

In the above two examples, note that for all / S Fq[Xi,..., it holds that 
evvif^) = e^vvif)^ hence we can obtain the same codes from the quotient algebra 
Fq[Xi,..., Xm ]/{Xf — Xi,..., X^ — Xm)- In general, we can take an ideal I C 
FqlXi,... ,Xm] and consider 4 = /+(Xf-Xi,.. .,X^-Xm)- Let P = {Pi, ...,P„} 
be the set of all rational points in the zero set V = V{Iq). The evaluation map 
evv '■ Rq = F 5 [Xi, ..., Xm]/Iq —F" is a vector space isomorphism. For any linear 
subspace L C R^ we define the affine variety code C{I,L) = ev-p{L). It is known 
that every linear code can be obtained in this way. Also algebraic geometry codes 
from curves, which are the main subject of this chapter, are particular cases of this 
construction. Affine variety codes were introduced by Fitzgerald and Lax in m, 
where the reader can find more details. 

3.2. Weight functions and order domains. In previous examples we have 
seen how to construct a chain of evaluation codes from an algebra R and an ordered 
basis of R. The better this order, the better will be the results obtained when using 
the order bounds. We formalize this idea. 

Let No = NU {0}. A function u : P —^ No U {—c»} is a weight on R if it verifies 
the following properties 

(W.l) v{f) = —oo if and only if / = 0; 

(W.2) u(l) = 0; 

(W.3) vlf + g)< max{i;(/), 11 ( 5 )}; 

(W.4) v{fg) = v{f)+v{g)] 

(W.5) if v{f) = v{g) then there exists an element A G F* such that v{f — Xg) < 

vif)- 

Remark 3.3. Let u be a weight function on R. The following are simple 
consequences of properties (W.l) to (W.5). 

(a) For all A G F* we have u(AA“^) = 'y(A) + u(A“^) = u(l) = 0. Then v{X) = 0. 
Conversely, if v{f) = 0 then there exists A G F* such that v{f — A) = —00 and 
/ = A G F,. 

(b) If v{f) > v{g) then v{f) = v{-g + (/ + 5 )) < max{u(g), v{f + g)} = v{f + g) < 
v{f), hence v{f + g) = v{f). 

(c) R is an integral domain, li fg = 0 with g 0 then u(l) < v{g). Thus 
v{f) < v{fg) = —00 which implies v{f) = —00 and so / = 0 . 

A Fq-algebra R with a weight function v will be called an order domain. Let 
H{v) = {v{f) : / G R*} = {vi,V 2 ,. ■.} be the increasing sequence of all integers 
appearing as the order of a nonzero element. For each Vi G H{v) let /i G P be such 
that v{fi) = Vi and consider the ordered set P = {/i, / 2 , ■ • ■ 
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Proposition 3.4. Let R be an order domain with order function v and let 
T = {/i, / 2 , ■ • ■ } as above. Then 

(1) J- is a basis of R overFq. 

(2) If f = then v{f) = ma.x{v{fj) : \j ^ 0}. 

Proof. An iterated application of property (W.5) shows that is a basis of 

R. (2) follows from Remark [331 (b). D 

3.3. Semigroups. A numerical semigroup is a set S' C Nq such that (i) 0 G S 
and (ii) if a, 5 G S then a + 5 G S. Our interest on semigroups comes from the 
following fact, which is a consequence of properties (W.2) and (W.4). 

Proposition 3.5. If R is an order domain and v is a weight function on R, 
then II{v) is a numerical semigroup. 

The elements of S will be called pole numbers or just poles, while the elements 
in No \ S will be called gaps. We shall denote by Gaps(S) the set of gaps of S. The 
number g = ^Gaps(S) is the genus of S. If S has finite genus then the smallest 
integer c such that a G S for all a > c is the conductor of S. From now on, all the 
semigroups we consider will be of finite genus. 

Lemma 3.6. The conductor c of a semigroup of genus g verifies c < 2g. 

Proof. Since c — 1 is a gap, given a pair (o, 6 ) G N§ with a + 6 = c — 1, at 
least one of these two numbers is also a gap. There are c such pairs and g gaps so 
we obtain the inequality. □ 

When c = 2g the semigroup is called symmetric. Note that for symmetric 
semigroups, given a pair (a, b) G Ng with a + 5 = c — 1, exactly one of these two 
numbers is a gap and the other is a pole. Gonversely, this condition ensures that 
c = 2g. 

From Lemma 13.61 the interval [0,2^ — 1] contains g poles and g gaps. If we 
write S as an increasing enumeration of its elements S = {ui = 0 < 112 < ... }, then 
2g = Vg+i, hence Ug+j = 2^ + i — 1 for alH = 1, 2,.... The first nonzero element of 

S, V 2 , is the multiplicity of S. It will play an important role in forthcoming sections 
of this chapter. 

A set of generators of S' is a set A = {ai,..., 0 ,.} C S' such that any a G S can 
be written as a linear combination a = AiUi + • • • + Xrttr with nonnegative integer 
coefficients. In this case we write S = (oi,... ,ar). All semigroups admit a finite 
set of generators. For example, the Apery set 

A(S) = {aGS* :a-V2tS*}. 

Example 3.7 (Semigroups generated by two elements). Let a,5 G N, a < 6 . 
Let 5 = gcd(a, 6). li 5 1 then S = (a, 6) C <5No is not of finite genus. Assume 

(5=1. From Bezout theorem, every integer m can be written as m = Aa + pib. 
Adding and subtracting ab to both summands if necessary, we can obtain an unique 
representation of this type with 0 < g, < a. Then m is a pole when A > 0 and a 
gap when A < 0. In particular, the largest gap is c — 1 = —a + (a — 1)6. Let us 
show that the semigroup is symmetric. Suppose the largest gap is the sum of two 
gaps —a + (a — 1)6 = (Aio + gib) + (A 2 a + g 2 b) with Ai, A 2 < 0, 0 < gi, g 2 < a. 
Then (—Ai — A 2 — l)a = {gi + g 2 — a + 1)6. Since —Ai — A 2 — 1 > 0 we have 
a\gi +/i 2 — a+l<a, a contradiction. Then the semigroup is symmetric and hence 
c = 2g. S has genus g = {a — 1)(6 — l)/2. 
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As a consequence of this example, a semigroup S has finite genus if and only 
if the greatest common divisor of its nonzero elements is 1. In this case there exist 
a,b £ S such that gcd(a, b) = 1 and (a, b) C S. 

The following fact will be used several times in what follows. 

Lemma 3.8. Let S be a semigroup of finite genus. If a £ S then 

#{S\{a + S)) = a. 

Proof. Let c be the conductor of S and m an integer. If m > a + c then 
m £ S and m £ a + S. Thus S\{a + S) = U\V, where U = {m £ S -.m < a + c} 
and V = {a + m : m £ S, a + m < a + c} C [/. Clearly ffU = a + c — g 
and ffV = G S : m < c\ = c — q, where q is the genus of S. Then 

nS\{a^S)) = ^U-W = a.' □ 

3.4. Codes from weights. Let R be an order domain over Fq and v a weight 
function on R. Let H = H{v) = {vi,V 2 , ■ ■ ■} be the semigroup of w. If 5 = gcd{a : 
a £ ff(v)*} = 1 then the weight v is called normal Otherwise we define the 
normalization of v as the weight v' = v/6. From now on, all weight functions will 
be normal. 

For each Vi £ H let fi £ R he such that v{fi) = Vi. The ordered set F = 
{/i) / 2 ) ■ • ■ } is a basis of i? as a vector space over F^. For m = —I, 0,1,..., we 
consider the linear subspaces 

L{m) = {f £ R-. v{f) < to}. 

Clearly L{—1) = (O),L(0) = Fg and {ft : Vi < to} is a basis of L{m). Then 
L(to — 1 ) C L{m) with equality if to is a gap of H. Since v is normal, H has a 
finite number of gaps, g. So equality occurs precisely g times. If to is a pole, then 
dim(L(TO)) = dim(L(TO — 1)) + 1. 

Let 4) : i? —>■ F^ be a surjective morphism of Fg-algebras (for example, an 
evaluation map). Then we obtain a chain of linear codes 

(3.1) (0) C C(4>, 0) C C'(4>, 1) C ... 

where C(4 >,to) = <I>(L(to)). Since 4) is surjective, the chain contains exactly n + 1 
distinct codes. We define the dimension set of this chain as 

M = M(4), u) = {to G No : C{^, to — 1) C(4>, to)}. 

It is clear that M consists of n integers. Write M = (toi = 0 ,TO2 , ... ,to„}. The 
name “dimension” set of M is justified by the following fact. 

Proposition 3.9. wer dim(C'(4),TOfe)) = k. Ifm is a nonnegative integer then 
dim(C(4>,TO)) = maxjr : to^ < to}. 

Proof. The first statement is clear. For the second one, if toa, = maxjr : 
TOr < to} then (7(4), to) = (7(4), TOfe). □ 

Let TO be an integer. If to ^ iL then L(to) = L(m — 1) hence to ^ M. If 
m £ H, take f £ R such that v{f) = to. Then L{m) = L{m — 1) + (/) so 
(7(4), to) = (7(4), TO — 1) + (4)(/)). Then m £ M \i and only if 4)(/) ^ (7(4 ),to — 1). 

The conditions of being 4) a morphism and v a weight, allow us to give estimates 
on the parameters of (7(4), to). The ideal (/) generated by / is a linear subspace of 
R, hence we can consider the quotient ring R/{f) as a vector space over F,j. 
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Lemma 3.10. Let f G R be a nonzero element. If v is a weight function on R 
then dim(i?/(/)) = v{f). 

Proof. The weight v maps the ideal (/) into the set v{f) + H. Let /i, / 2 ,. • ■ S 
R be such that v{fi) = Vi and ft G (/) when vt G v{f) + H. Then {/i, / 2 ,... } is a 
basis of R and {fi + (/) : Vi ^ v{f) + H} is a basis of R/{f). Thus dim(i?/(/)) = 
ff{H \ (u(/) + H)) = v{f) by Lemma [3^ □ 

Lemma 3.11. If m <n then L{m) nker($) = (0). 

Proof. Let / G ker($), / ^ 0. Then (/) C ker(il>) and we have a well defined, 
linear, surjective map $ : R/{f) —>■ F". Thus dim(i?/(/)) > n and Lemma TS.IOI 
implies v{f) > n, hence / ^ L{m). □ 

Proposition 3.12. Let m < n be a nonnegative integer. 

(1) m G M if and only if m G H. 

(2) The code has dimension k = dim(L(m)) = max{z : Vi < m} 

and minimum distance d > n — m. If the semigroup H has genus g and 
2g < m < n, then k = m + 1 — g. 

Proof. If m < n then the map $ : L{m) —>■ F” is injective by Lemma [3.111 
Then m G M if and only if L(rn — 1) ^ L{m) that is if and only \i m G H. So 
k = dim(L(m)) = max{i : Vi < m}. Since H has g gaps, its conductor verifies 
c < 2g, so when m > 2g we have m = Vm+i-g implying k = m + 1 — g. Let us 
prove the statement about the minimum distance d. Let c = $(/), / G L(m), 
be a codeword of C'(<1>, m) with weight d. Let I = {1,..., n} \ supp(c) be the set 
of zero coordinates of c and tt : F" —>• F^""^ be the projection on the coordinates 
of I. The map tt o $ : —>• is a surjective morphism of algebras. Since 

/ G L(m)nker( 7 ro$), Lemma l3 .11 1 implies m > n — d or equivalently d > n — m. □ 

The inequality d{C{^,m)) > n — m is the Goppa bound on the minimum 
distance of C'($,to). 

3.5. The order and dual order bounds. Besides the Goppa bound, we 
can apply to C'($,m) and its dual C'(<l>,m)-*' the bounds of Theorems 12.41 and 12.71 
respect to the sequence Co = (0) C Ci C • • • C C„, obtained from the chain of 
eg nation 13 .1 1 after deleting repeated codes. Since dim(Cfe) = fc, the map ps defined 
in Section 12.31 can be written as 

p(v) = min{dim(C'($, to)) : v G C'($,to)}. 

Lemma 3.13. Let f G R*. 

(1) p(<i>(/)) < dimCfiP, v(/)) with equality if v(f) G M. 

(2) Ifv{f) ^ M then v[fh) (f M for all h G R*. 

Proof. (1) The first statement is clear since / G L(v{f)) and hence $(/) G 
C(<i>, v{f)). If v{f) G M then $(/) G C($, v{f)) \ C(<i>, {v{f) - 1)) and p{^{f)) = 
dimC(<i>,r;(/)). (2) If v{f) ^ M then $(/) G C{^,v{f) — 1) hence there exists 
G L(v{f) — I) such that $(/) = ‘h(V')- If t(//i) G M then dimi;(//i)) = 
p{^{fh)) = p{^{tfh)) < dimC'($,i;('!/'/i)). Since v{fh) > v{'tfh) we get the equality 
C{^,v{fh)) = C{^,v{'tph)), contradicting our assumption v{fh) G M. □ 

The equality p($(/)) = dim v{f)) is not true in general. Let H = II\ M. 
Lemma [3. 131 21 implies H + H Q H, oi equivalently M C H \ {H + H). 
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Corollary 3.14. M C H \ [qH* + H). 

Proof. Let m € H, m 0, and let / G i? be such that v{f) = m. Then 
^(/^) = Since $ is a morphism, we have 4>(/^) = $(/) * • • • * 

<i)(/)(q times) = $(/). Thus qm ^ M. This proves qH* C so qH* + H C H + H 
and M C H\{H + H) C H\qH* + H). □ 

For i = 1,..., n, let ())i G i? be such that v{(j)i) = rrn. The set B = {$((^ 1 ),..., 
^{(j>n)} is a basis of F" and the sequence of codes (Ck) is given by 

Ck = ($(<^i), ■ ■ ■, $(<^fe)) = ^(4*, mk), fc = 1 ,..., n. 

Proposition 3.15. If Vr + Vg = mt G M then Vr,Vs G M and {^{fr),^{fs)) 
is a well-behaving pair with p{^{fr) * 4>(/s)) = t. 

Proof. If Vr Vg G M, Lemma 13.131 21 implies Vr,Vg G M. Write Vr = 
mi,Vs = ruj, so (pi = fr and pj = fg. We have 

p{^{pi) * ^iPj)) = pi^ipipj)) = dim C{^,v{pipj)) = dimC($,TOi + rrij). 

If (a, 5) ^ (ij) then v{paPb) < v{PiPj) and hence p{^{pa)*^iPb)) = pi^iPaPb)) < 
dimC($,TOi + rUj) = p{^{pi) * ^{pj)). □ 

From Proposition 13.151 we can derive a new version of the order bounds on 
the minimum distance of C{^,m) and C{^,m)^ as follows. For r = I,...,n, 
s = 0,..., n — I, consider the sets 

A* = {{r,j) : TTir + rUj G M} , Nf = {{i,j) : m* + irij = nig+i} 

Define 

doRoik) = mm{#A*:r = l,...,k} 
doRoik) = mm{#N* : s = k,...,n-l}. 

By applying the bounds of Theorems l2.4l and l2.7l with respect to the basis {<i)(^i),..., 
^{pn)}, we get the following result. 

Theorem 3.16. For a non-negative integer m, we have 
d{C{^,m)) > doRD(dim(C($,TO))) 

d(C'($,TO)-^) > d^^£,(dim(C($,TO))). 

The inequalities stated in this theorem are the order (or Feng-Rao) bounds 
on the minimum distances of the primary code m) and its dual C'(<I>, m)'*", 
respectively. They do not depend on the basis B but only on the dimension set M. 

3.6. Bibliographical notes. Order domains and evaluation codes were in¬ 
troduced and studied by T. Hpholdt, J.H. van Lint and R. Pellikaan, |27| . The 
purpose was to simplify the theory of algebraic geometry codes and to formulate 
the order bound on the minimum distance in this language. This bound was first 
suggested by G.L. Feng and T.N.T. Rao in |13j for the duals of one-point algebraic 
geometry codes. At the same time, R. Matsumoto and S. Miura independently de¬ 
veloped many of the same ideas for duals of one-point codes. They also formulated 
the Feng-Rao bound for any linear code defined by means of its parity check matrix, 
[35j . Another generalization to all linear codes described by means of generator 
matrices, was given by Andersen and Geil, [l]. That paper is primarily devoted 
to linear codes, but also the cases of codes from order domains and affine variety 
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codes are treated. This is the bound we have stated in Theorem 12.41 Many works 
have been devoted to study the relations between these bounds and to generalize 
them, see |21j and the references therein. 

Our presentation of order domains follows closely m- In our exposition 
we have limited ourselves to consider weights v whose semigroup H(v) is a sub¬ 
semigroup of Nq. If more general semigroups are allowed (for example, subsemi¬ 
groups of Ng for some r), then the family of obtained codes is very enlarged. See 


4. Codes from Algebraic Geometry 

Some of the most interesting examples of evaluation codes are obtained from 
algebraic curves. This section is devoted to developing a basic introduction to 
algebraic geometry codes. 

4.1. Algebraic curves. It is not our intention here to explain the theory of 
algebraic curves, which can be found in many excellent books (eg. |15L I27L I45j l. 
Therefore we assume a certain familiarity of the reader with algebraic geometry 
and we simply recall the basic ingredients we need to cook our codes. 

An algebraic curve X over is an absolutely irreducible algebraic variety of 
dimension one over F^. The set of rational points of X is denoted X{¥q). Algebraic 
geometry codes will be obtained through evaluation of rational functions of X at 
(some) points in X{¥q), so we always refer to curves with A’(Fq) ^ 0. Let Fq(A’) be 
the field of rational functions of X. Among all curves having ¥q{X) as a function 
held, there is (up to isomorphism) one nonsingular projective curve. We shall use 
this one for our code construction. Thus, in what follows, the word curve means 
an algebraic, projective, absolutely irreducible, nonsingular curve (although we 
eventually use singular plane models of such a curve for our computations). 

Points on X correspond to valuation rings in its function held. Given a function 
/ ^ 0 , the order of / at a point P of A is the integer vp{f), where vp is the discrete 
valuation corresponding to the valuation ring of P. If vp{f ) < 0 then P is a pole 
and if vp{f ) > 0 then P is a zero of /. The divisor of / is div(/) = ^e(/)^’- 

Given a rational divisor G of A, we consider the vector space of functions 
having zeros and poles specihed by G 

C{G) = {/ G F,(A) : div(/) + G > 0} U {0}. 

The dimension of this space is denoted by t{G). Riemann-Roch theorem states that 
there is a constant g (the genus of A) such that i{G) = deg(G) -I-1 — g + £{W — G), 
where W is a canonical divisor. Since canonical divisors have degree 2g — 2, it holds 
that i{G) = deg(G) + 1 — g when deg(G) > 2g — 2. 

Two divisors G and G' are linearly equivalent^ denoted G ^ G', if there is ratio¬ 
nal function (f) with div((^) = G — G'. In this case C{G) and C{G') are isomorphic 
via the map f ^ (j)f. 

The gonality of the curve A over F^ is the smallest degree 7 of a non-constant 
morphism from A to the projective line. Equivalently 7 is the smallest degree of a 
rational divisor G such that t{G) > 1. More generally, the gonality sequence of A, 
GS{X) = { 7 i : z = 1,2,... }, is defined by 

7 * = min{deg(G) : £(G) > i}. 
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Then 71 = 0 and 72 is the usual gonality. Since t{G) < deg(G) + 1 when deg(G) > 
0, we have 7 ^ > z — 1. Conversely, from Riemann-Roch theorem it follows that 
7 i < * — 1 + 5 with equality for i > g. The gonality sequence GS{X) verifies a 
symmetry property (similar to the symmetry property for semigroups): for every 
integer r, it holds that r G GS{X) if and only if 2^ — 1 — r ^ GS{X), cf. |37j . In 
general, computing GS{X) is a difficult task but for plane curves this sequence is 
entirely known and depends only on the degree of X, see |43j . 

4.2. Algebraic geometry codes. Let A be a curve of genus g over and 
let V = {Pi, ..., Pn} be a set of n distinct rational points on X. Let G be a rational 
divisor of nonnegative degree and support disjoint from D = Pi + ■■■ + P^. The 
algebraic geometry code (or AG code) G{X,D,G) is the image of the evaluation 
map 

evv : £{G) ^ evr{f) = (/(Pi), • • ■, /(P„)). 

ev-p is a linear map whose kernel is £(G — D). The dimension of this kernel a = 
£(G — D) is the abundance of G{X, D, G). In particular, if deg(G) < n then a = 0 
and hence G{X, D, G) = G(G). The parameters of this code are as follows. 

Theorem 4.1. The code G{X,D,G) has dimension k = £{G) — £{G — D) and 
minimum distance d > n —deg(G) + 7 a+i. In particular, when 2g — 2 < deg(G) < n, 
then k = deg(G) + 1 — g and d> n — deg(G). 

Proof. The statements about the dimension follow from the definition of 
G{X,D,G) and the Riemann-Roch theorem. To see the bound on the minimum 
distance, let c be a codeword of weight d > 0. Let D' < D he the divisor ob¬ 
tained as the sum of points in V corresponding to the n — d zero coordinates of 
c. There exist a function / G £(G — D') \ C{G — D) such that c = ev'p{f). Then 
£{G — D') > i{G — D) + 1 = a + 1 hence, by definition of gonality sequence, 
la+i < deg(G - D') = deg(G) - (n - d). □ 

The weaker bound d > dG{G{X, D, G)) = n — deg(G) is often called the Goppa 
bound on the minimum distance. Note that it is similar to the bound on the 
minimum distance of Reed-Solomon codes seen in Example 13.21 and the Goppa 
bound for codes coming from order domains. The bound on d stated in Theorem 
14.11 d> n — deg(G) -I- 7a-i-i, is sometimes referred as the improved Goppa bound. 

Proposition 4.2. d{C{X,D,G)) = n — deg(G) if an only if there exists a 
divisor D',0 < D' < D such that G ^ D'. 

Proof. As in the proof of Theorem 14.11 d = n — deg(G) if an only if there 
exists a divisor D', 0 < D' < D such that £{G — D') > 0. Since G and D' have the 
same degree, this happens if and only if G ^ P'. □ 

From Theorem l4.ll the parameters of G(A’, D, G) verify k+d > t'(G) —deg(G)-|- 
n. According to Riemann-Roch theorem, a simple computation shows that this 
inequality implies 

(4.1) n+\ — g<k + d<n+\ 

where the right-hand inequality is the Singleton bound. The number n -\-1 — k — d 
is the Singleton defect of G{X, D, G). Recall that n + 1 — k — d<g and that codes 
of Singleton defect 0 are MDS. 
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Example 4.3. Take X = the projective line over Fq. Let Q be the point 
at infinity and V the set of n = q affine points. Then C{F^,D,mQ), 1 < m < g, is 
precisely the Reed-Solomon code of dimension fc = m + 1. Since g = 0, it is a MDS 
code. 


Thus AG codes can be seen as generalizations of RS codes: instead of the 
projective line consider an arbitrary curve X over Fg. Note that Reed-Solomon 
codes have excellent parameters k and d, but too small length (consider the case 
q = 2). According to the Hasse-Weil bound, cf. |45j . we have 

|#A’(F,) - (g-b 1)1 < 2g^ 


hence longer codes can be obtained by using curves of higher genus, although then 
the Singleton defect increases. From equation 14.11 the relative parameters verify 



n n n 

so one way to get better codes from curves of high genus is to take n large with 
respect to g. This strategy requires curves with many points respect to its genus. 


Example 4.4 (Codes on the Klein Quartic). Let us consider the curve X 
defined over Fg by the projective equation X^Y + Y^Z + Z^X = 0. A is called 
the Klein quartic. It is a nonsingular plane curve, hence its genus is 3 by Pliicker’s 
formula. A direct inspection shows that X has 24 rational points, which is the 
maximum possible number allowed by the Serre’s improvement on the Hasse-Weil 
bound, 


\#X{¥,)-[q + \)\<g\2^\. 

Consider the points Qo = (1 : 0 : 0), Qi = (0 : 1 : 0), (^2 = (0 : 0 : 1) G ^(Fs) 

and the divisor G = m((3o + Qi + Q2), for m = 2,..., 6. Let V be the set of 21 

rational points different from Qi,Q2, Q3 and let D be the sum of all these points. 
The algebraic geometry code C{X,D,G) was first studied in [25] . According to 
Theorem Q] it has dimension k = 3to — 2 and minimum distance d > 21 — 3m. 
Note that for other values of m the parameters of the obtained codes are much more 
difficult to estimate (try it!). For m = 3,4, no codes are known improving these 
parameters, see |34) . Take, for example, m = 4. Then £(4((5o + Qi + < 52 )) = 10. 
The following ten functions 

^3 ^ 2 ^ ^y2 j^YZ XZ'^ Y^ Y^Z YZ^ Z^ 

rjn 5 rj^ 5 rjn 5 rj^ 5 rjn 5 rjn 5 rj^ 5 rj^ 5 rjn 5 rjn 5 


where T = XYZ, belong to /l(4(Qo + Qi+ Q 2 )) and are linearly independent, hence 
they form a basis of £(4(Qo + Qi + Q2))- A generator matrix of G{X,D,A{Qq -b 
Qi + Q2)) is obtained by evaluating these functions at all points of V. 


4.3. Isometric codes. An isometry of F” is a linear map Z : F^ — >■ F” leaving 
the Hamming metric invariant, d(u,v) = d(Z(u), Z(v)). Thus an isometry is an 
isomorphism. Two codes C,C' of length n are isometric if there is an isometry 
I such that 1{C) = C. Clearly isometric codes have equal parameters n,k,d and 
similar properties. 

Let X = {xi,.. . ,Xn) be a n-tuple of nonzero elements of F^ and a € Sn, 
the symmetric group on n elements. The maps x : v 1 —>■ x * v and cr : v 1 —>■ 
('i'cr(i)) • • ■ )^cr(ri)) isometi'ies. Conversely, it can be proved (and it is left as an 
exercise to the reader) that any isometry I can be written as Z = x o ct, where 
X G (Fp" and a G 5„. 
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Proposition 4.5. Let a G Sn and Da = Pa(i) + • • • + Pa(n)- Let G,G' he two 
rational divisors such that supp(G) fl P = supp(G') fl P = 0. If G ^ G' then the 
codes C{X,D,G) and C{X,Da,G') are isometric. 

Proof. If G ^ G' then there exists a rational function (p such that G — G' = 
div((/.) and £(G) = {0/ : / e £(G')}. Thus G{X, D, G) = ev^iP) * G(X, D, G') = 
evv{(p)*a-\G{X,Da,G’)). □ 

A converse of Proposition ldAl is also true under some supplementary conditions 
on n, see [36j . 

4.4. Duality. The dual of an algebraic geometry code is again an AG code. 

Theorem 4.6. There exists a differential form oj with simple poles and residue 
1 at every point Pi gV. IfW is the divisor ofuj, then 

C(X, D, G)^ = C(X, D,D + W-G). 

Proof. (Sketch) The existence of such form uj is guaranteed by the indepen¬ 
dence of valuations, see |45j . Chapter I. The map £(D -|- IP — G) —>■ fl(G — D), 
(p I—>■ puj is a well defined isomorphism of vector spaces. Furthermore 

p{Pi) = p{Pi)vesp.{ijj) = vesp,{(puj) 

where i'esp{rj) denotes the residue at P of the differential form rj. Let u G C{X, D, G), 
V G G{X, D,D + W — G) and write u = evp{f),v = evp{p). Then 

n n n 

u-v ^'^f{Pi)p{Pi) = '^f{Pi)resp,{puj) = '^resp,{f(puj). 

i—1 i—1 i—1 

Since div(/) > —G and div(())w) > G — D, we have div{fpuj) > —D, so fpco has no 
poles outside sop(D). Then 

n 

^ resp,(/^w) = ^ respifpuj) = 0 
i=i Pex 

where the right-hand equality follows from the Residue theorem ( |45) . Corollary 
IV.3.3). Finally, since dim(G(A’, D, G)) -I- dim(G(A’, D, D + W — G)) = n, we get 
the result. □ 

4.5. One-point codes and Weierstrass semigroups. If G is a multiple of 
a single rational point Q of X and P is the set of rational points on X different 
from Q, then the code G{X, D, mQ) is called one-point. These codes are, in general, 
easier to study than the others. 

The space C{mQ) is the set of rational functions with poles only at Q of order 
at most m. The set of rational functions with poles only at Q 

OO 

C{<X)Q) = [J C{mQ) 

m—0 

is an Fq-algebra. The evaluation map evp is thus a morphism of F^-algebras. As the 
dimension oiG{X, D, {n-\-2g—l)Q) is k = l{{n-\-2g—l)Q) — l{{n+2g—l)Q—D) = n, 
we have G{X, D, {n + 2g — 1)(5) = F^ and evp is surjective. On the other hand, 
from the properties of valuations it follows that —vq is a weight function on C{ooQ) 
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and this algebra becomes an order domain. So the theory developed in Section 13.41 
can be applied. In particular, the chain of codes stated in eauation l3.11 becomes 


(0) C C{X, D, 0) C C{X, D, Q) C C{X, £>, 2Q) C • • • C C{X, D, mQ) C • ■ • 

For simplicity we shall write v instead —vq and ev instead ev-p whenever the point 
Q and the set V are fixed. Also in order to simplify the exposition 

from now on we shall assume n >2g 

(otherwise we must distinguish several cases, which makes the exposition very cum¬ 
bersome). The semigroup associated to the weight v, 

H{v) = {v{f)-.fe£{ooQ),f^0} 

is now denoted H{Q) and called the Weierstrass semigroup of Q. As it happens for 
general weight functions, m G H{Q) iff l{mQ) l{{m — 1)Q) (and thus l{mQ) = 
l{{m—l)Q)+l). Then, when m is a gap we have C'(A’, D, mQ) = C(X, D, {m—l)Q). 
From Riemann-Roch theorem it holds that l{2gQ) = g + 1 hence H{Q) has the same 
genus g as the curve X. Since l{{2g — 1)(3) = g, then H{Q) is symmetric when 
l{{2g — 2)Q) = g, that is when {2g — 2)Q is a canonical divisor. 

Example 4.7 (Hermitian curves). Consider the curve TL defined over the field 
F,j 2 by the affine equation 

+ y = 

"H is called the Hermitian curve. Codes arising from this curve are the most studied 
among all AG codes. 'H is a nonsingular plane curve, hence its genus \s g = 
q{q — l)/2. Let us compute its rational points. H. has exactly one point at infinity 
Q = (0 : 1 : 0), which is the common pole of x and y. The map /3 i—>■ /3'^ -f /3 is 
the trace map from Fq 2 to F^ and hence it is F^-linear and surjective. Let a G Fq 2 . 
Since G Fg, we deduce that the polynomial T'^ + T — has q different 
roots P in ¥g 2 . Then the line x = a intersects H at q different affine points, which 
are rational over Fq 2 . In terms of divisors 

div(a: - a) = ^ - qQ 

/3eE^2 ,/39+/3=a9+i 

where = (a : /3 : I). A similar reasoning proves that when -I-/3 ^ 0, we have 
div(y - P) = Pa,i3 -{q + 1)Q. 

oi £¥^2 

In particular, from the first equality and since we have q^ choices for a, we deduce 
that TL has q^ rational affine points, that is -I- 1 rational points in total. Then 
Tl has the maximum possible number of rational points according to its genus as it 
achieves the Hasse-Weil upper bound. It is a maximal curve. 

Let us compute the Weierstrass semigroup H{Q). Once the divisors div(a; — a) 
and div(?/ — /3) are known, we deduce that q and q + 1 are pole numbers, hence 
{q,q -f 1) C H{Q). According to Example 13.71 the semigroup {q,q + 1) has genus 
9 = ~ l)/2 = g{TL). Then we get equality H{Q) = {q,q+ I). In particular this 

semigroup is symmetric. 
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Example 4.8 (Hermitian codes). One-point codes over Fq 2 coming from Her- 
mitian curves are called Hermitian codes. Let Q be the point at infinity and V be 
the set of all n = affine points on TL. Hermitian codes are the AG codes 

C{'H, D,mQ) = ev{L{mQ)) 

m = 0,1,2,.... To describe these codes explicitly we must determine the spaces 
of rational functions C{mQ) and C{ooQ). The Weierstrass semigroup can be a 
useful tool to accomplish this task. Write H{Q) = {vi = 0, n 2 ■ • ■ } as an increasing 
enumeration of its elements. A basis of C{ooQ) is a set of functions {fi : i G N} 
such that v{fi) = Vi, see Proposition [331 If m G H{Q) then m can be written as a 
linear combination m = Xq + fi{q + 1), where A and fj, are nonnegative integers and 
< q. Then v{x^y^) = m. It follows that a basis of C{ooQ) is 

: 0 < X,0 < fj. < q} 


and a basis of C{mQ) is 

{x^y^ : 0 < A, 0 < /r < g, Ag -I- y,{q -f I) < m}. 

The parameters of these codes can be estimated from the arithmetic of TL. For 
example, let us show that for small values of m G H, the minimum distance of 
C{'H, D,mQ) attains the Goppa bound. Let a G F *2 and let ai,.. .Uq+i be the 
roots of These roots belong to F,j 2 and are pairwise distinct, so 

we can write Fq 2 = {ai ,..., a^+i, 0 ^+ 2 ,..., 0 ^ 2 }• Let /3i,..., /Sq be the roots of 
Ti -\-T = Then for i > q -f 1, the affine points are not in 'H(F,j 2 ). Let 

A,/r be two integers such that 0 < X < q^ — q,0 < y < q and let m = Xq + y{q -I- 1). 
Then m G H,m < n and the function 

A M 

/ = ]^(a: - aq+l+^) - /3j) 

j=i 

verifies div(/) = D' — mQ, with 0 < D' < D. Then, according to Proposition 14.21 
the code C(TL, D, mQ) attains the Goppa bound, d{C{'H, D, mQ)) = n — m. Since 
all poles m G H such that m < n — q^ can be written in the form m = Xq + y,{q + I) 
with 0 < A, 0 < ^ < g, we deduce that all Hermitian codes C{'H, D, mQ) attain the 
Goppa bound for m < n — q^. The same happens when m < n is a multiple of q, 
m = Xq. To see that it is enough to consider the function 

A 

i=l 

We shall compute the minimum distances of all nonabundant Hermitian codes later, 
seeing them as particular cases of Gastle codes. 

The same reasoning as in the above example shows that for an arbitrary curve X 
the ring C{ooQ) is a finitely generated F^-algebra. Take a generator set {oi,..., a^} 
of H{Q) and functions ipi,... such that v{'ipi) = Ui for i = 1, ...,r. Then every 
element in H{Q) is a combination of oi,..., with nonnegative integer coefficients, 
hence C{ooQ) = Fqlipi ,..., ipr]- 
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4.6. The dimension set and the order bound on the minimum dis¬ 
tance. Keeping the notation of previous sections, let T be a curve of genus g 
defined over the finite field Fg and let d:’(Fg) = {Q,Pi,... ,Pn} be the ratio¬ 
nal points in X. Let P = Consider the chain of one-point codes 

(0) C C(T, P, 0) C ... C C{X, D, in + 2g- 1)Q) = F^. 

The dimensions of these codes can be obtained from the dimension set M = 
{mi,..., m„}. Let H = H{Q) = {ui = 0 < U 2 < ... } be the Weierstrass semigroup 
of Q and let Gaps(iL) = {h,..., Ig} be the set of gaps of H. Let us remember that 

M = {m € No : C{X, D, mQ) ^ C{X, D, (m - 1)Q)}. 

Proposition 4.9. M = {m e H : £{mQ - D) = t{{m - 1)Q - D)}. 

Proof. If m G M then i{mQ) ^ £((m — 1)Q) and m G H. The kernel of the 
evaluation map restricted to L{mQ) is L{mQ — D), so when m < n this evaluation 
is injective and hence to G M if and only if to G H. When m > n then to — 1, to G H 
which implies i{mQ) = l{{m — 1)Q) + 1. Thus C{X, D, mQ) ^ C(X, D, (to — 1)Q) 
if and only if both kernels are equal. □ 

Thus, for all nonnegative integers to < n we have to G M if and only if to G P. 
Then, once H is known, the problem of calculating M is reduced to determine its 
last g elements. Since C{X, D, {n + 2g — 1)Q) = F” we deduce that g elements of 
{n ,... ,n + 2g — 1} belong to M while the other g elements do not. 

Proposition 4.10. If the divisors D and nQ are linearly equivalent, D ~ nQ, 
then M fl {n,... ,n + 2g — 1} = {n -I- ^i,...,n -I- Ig}. 

Proof. If P ^ nQ then n ^ M and n + vi,... ,n + Vg ^ M by the remark 
after Lemma [3. 131 The statement follows by cardinality reasons. □ 

Example 4.11 (Hermitian codes). As seen in Example 14. 161 we have P ^ nQ. 
Then Proposition 14. 101 gives M. 

We can obtain estimates on the minimum distance of one-point codes by using 
the order bound stated in Theorem 13. 161 

d{C{X,D,mQ)) > doRD{diui{C{X,D,mQ))). 

This bound improves the classical Goppa bound d{C{X,D,mQ)) > dG{C{X,D, 
mQ)) = n—m as the next result shows. Let tt be the smallest element in P = H\M. 
Note that tt > n. The sets A* can be rewritten as A* = {mj G M : mi + mj G M} 
or, since P -|- P C P as noted after Lemma [3.131 as A* = {to G M : m — mi G 
H} = (TOi-f P)nM. 

Proposition 4.12. For all i = 1,... ,n, we have doRD{dim{C{X, P, miQ))) > 
dG(C{X,D, miQ)). If mi <77 — Ig then equality holds. 

Proof. For the hrst statement it suffices to show that ff{M \ A*) < mi for all 
i. Since A* = {mi + H) fl M, we have M \ A* C P \ (to^ -|- P) and this follows from 
the fact that #(P \ (to^ -I- P)) = mi, stated in Lemma [5T51 If mi + lg < tt, then all 
elements in P \ {mi + 11) are smaller than tt and hence M\A* = P \ {mi + H). □ 

Example 4.13 (Codes on the Suzuki curve). The Suzuki curve S is character¬ 
ized as being the unique curve over Fg, with q = 2qQ, and go = 2’' > 2, of genus 
9 = 9o{q — 1) having -I-1 Fg-rational points, see |16j . Without going into details, 
which would lead us too long, a plane singular model of S is given by the equation 
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y‘^—y = — Thus, there is just one point Q over x = oo which is Fg-rational. 

The Weierstrass semigroup of Q is known to be H(Q) = {q, q+qo, q+2qo, q+2q[j + \) 
(see [Ml [32]). 

Let us consider the particular case q = 8. In this case the Suzuki curve has 
genus g = 14 and 65 rational points. A plane model of S is given by the equation 
y^z^ — yz^ = x^{x^ — xz"^). This model is non-singular except at the point (0:1:0). 
Being this singularity unibranched, the unique point Q lying over (0 : 1 : 0) is 
rational. Let us consider the codes C{S,D,mQ), where D is the sum of all 64 
rational points of S except Q. The Weierstrass semigroup at Q is 

H = (8,10,12,13) 

= {0, 8,10,12,13,16,18,20, 21, 22, 23, 24, 25, 26, 28, ^}. 

Then 


qH* + H = {qvi -f Vj : v^, Vj £ H,Vi ^ 0} 

= {64,72,74,76,77,80,82,84,85,86,87,88,89,90,92, ^}. 

By Corollary 13.141 M C H \ {qH* + H), so we obtain 

M C {0,8 ,10,... (same as H), 63, 

65,66,67,68,69,70,71,73,75,78,79,81,83,91}. 

Since both sets have cardinality n = 64 we conclude that they are equal. An 
straightforward computation gives the sequence (#A*, 1 < i < 64): (64, 56, 54, 52, 
51, 48, 46, 44, 43, 42, 41, 40, 39, 38, 36, 35, 34, 33, 32, 31, 30, 29, 28, 28, 26, 25, 
24, 23, 22, 21, 20, 21, 18, 19, 16, 17, 16, 13, 12, 14, 10, 13, 8, 12, 10, 9, 8, 8, 6, 8, 
7, 4, 5, 4, 4, 4, 5, 4, 3, 2, 2, 2, 2, 1). We find 14 nonabundant codes (m < 64) for 
which the Goppa bound is improved (plus all the abundant ones). Specifically those 
corresponding to the values rm £ {37,45,47,49, 50, 53, 55, 57, 58, 59,60, 61,62,63}. 
In particular we find four codes [64, 37, > 16], [64, 58, > 4], [64,62, > 2] and [64,63, > 
2] achieving the best known parameters, see |34j . 

4.7. Duals of one-point codes. The dual of an one-point code is not one- 
point in general. According to Proposition 14.61 we have C{X,D,mQ)^ = C{X,D, 
D + W — mQ), where W is the divisor of a differential form w with simple poles 
and residue 1 at all points Pi £ V. Then we have the following result. 

Proposition 4.14. If there exist a differential form lo with simple poles and 
residue 1 at all points Pi £ V, such that div(a;) = {n + 2g — 2)Q — D then 
C{X,D,mQ)^ = C{X,D,{n + 2g-2-m)Q). 

In this case, the dual of an one-point code C{X,D,mQ) is again an one-point 
code, C{X, D,mQ)-^ = C{X,D,{n + 2g — 2 — m)Q). Thus we get two order 
bounds on the minimum distance of this code, namely doRD{'^lxo.C{X, D,mQ)) 
and dQ[Aim. C{X,D, {n + 2g — 2 — m)Q)). Both bounds give the same result. 

Proposition 4.15. If there exist a differential form lo with simple poles and 
residue 1 at all points Pi £ V, such that div(tLi) = {n + 2g — 2)Q — D, then 
doRD{dim C{X,D,mQ)) = dQ{dim C{X, D, {n + 2g - 2 - m)Q)). 

The proof of this result can be found in |22j . 
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Example 4.16 (Duals of Hermitian and Suzuki codes). Consider the Hermitian 
curve % over ¥g 2 . The function 

/= n 

has divisor div(/) = D — q^Q, where D is the sum of all n = rational affine 
points on H. Then div(/) = D — nQ. It can be proved (see [44]) that div(d///) = 
{n+2g — 2)Q — D. T\ms C{T-L,D,mQ)^ = C{'H, D, {n + 2g — 2 — m)Q). Analogously, 
for the Suzuki curve S over Fg, the function 

/ = n 

aeFg 

verifies div(/) = D — nQ and div(d///) = {n + 2g — 2)Q — D. Then the dual of an 
one-point Suzuki code is one-point too. 

4.8. Improved codes. By choosing suitable functions / to be evaluated, in 
some cases we can slightly change one-point codes improving their parameters. Let 
5 be an integer, 0 < S < n. Let X, V, Q as in the previous sections. Given functions 
(pi,... ,(pn such that pi G L{ooQ) and v{pi) = mi, we define the improved code 

C{D,Q,5) = {{ev{pp-.#h*>5}). 

From Proposition 12.31 it is clear that the minimum distance of C{D,Q,S) is at 
least 6. The sequence (A*) is said to be monotone for S if for every i,j such that 
#A* > S and #A* < S we have that i < j. If (A*) is monotone for 5 then 
C{D,Q,S) is an usual one-point code, so improved codes only improve one-point 
codes for those S for which the sequence is not monotone. In this case the code 
C{D, Q, (5) depends on the choice of pi,..., pn. In fact, if #A* = <5 and #A* < 5 
for some j < i, then v{pi + pj) = v{pi) but in general ev{pj) ^ C{D,Q,S), hence 
ev{pi+pj) ^ C(D, Q, 6). Thus we have a collection of improved codes with designed 
distance 6, depending on the collection of sets {pi ,..., pn}- 

Example 4.17 (Improved Suzuki codes). Let us consider the Suzuki curve S 
over Fg of Example 14.131 In that example we computed the sequence (#A*). This 
sequence is monotone for (5 = 3, 5, 6,9,13,14,18,20, 21. For example the one-point 
code C{S, D, 70Q) has dimension 55 and distance at least 4 (that is doRD{55) = 4), 
whereas C{D,Q,4) has the same distance and dimension 57. 

4.9. Bibliographical notes. Algebraic geometry codes (also called geometric 
Goppa codes) were introduced by V.D. Goppa in in the seventies, [231124j . as a 
generalization of another family of codes previously invented by himself, that of 
classical Goppa codes. AG codes became famous when M. Tsfasman, S.G. Vladuts 
and T. Zink showed in the early eighties, that there exist infinite families of these 
codes exceeding the Gilbert-Varshamov bound, |46j . The enormous interest aroused 
by these codes has encouraged the study of the theoretical tools supporting them, 
mainly algebraic geometry over finite fields. 

Godes coming from many interesting curves have been studied in detail. For 
what it is referring to the two main examples discussed in this chapter, Hermitian 
codes were hrst studied by Stichtenoth, [44j . and later by many authors. Their 
minimum distances were computed in [47j and their complete weight hierarchies in 
[2|. Suzuki codes were introduced by J. P. Hansen and H. Stichtenoth, [26j . The 
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true minimum distances of codes on this curve are known in many cases, but not 
always. 

Besides one-point codes, which are the ones mainly discussed in this chapter, 
codes over more than one point (two, three or more) have been also studied, [ 3 128 L 
133] , The interested reader can find multiple-point codes on the Hermitian curve 
[31| . the Suzuki curve [32] , or the Norm-Trace curve |41] . 

Many works have been devoted to the study of the order bound for AG codes. 
In its original formulation this bound applies to the duals of one-point codes. A nice 
generalization to arbitrary AG codes was given by P. Beelen and later improved 
by I. Duursma, R. Kirov and S. Park in a sequence of articles laiTniiii]. The 
application of Andersen-Geil bound to one-point codes treated in this chapter is 
due to O. Geil, G. Munuera, D. Ruano and F. Torres, |22j . 

5. Castle curves and Castle codes 

As seen above, curves with many points with respect to its genus provide codes 
with good parameters. This observation has led in recent years to an intensive 
research in order to determine good bounds on the number of rational points of 
a curve and to find curves with many points. For our purposes in this chapter is 
relevant one of these bounds, due to Lewittes. This bound has the particularity 
of being proved by using one-point codes. It links the number of points on the 
curve to the Weierstrass semigroup of one of them. This fact makes the bound 
particularly interesting for coding theory because the properties of this semigroup 
strongly affect the parameters of the obtained codes. 

5.1. The Lewittes bound on the number of rational points of an al¬ 
gebraic curve. Let T be a curve over Fg and write A’(Fg) = {Q, Pi,..., Pn}, 
V = {Pi,... ,Pn}. Consider the one-point codes C[X,D,mQ). Let H = {i;! = 
0 ,U 2 , ■. ■ } be the Weierstrass semigroup of Q and V 2 its multiplicity. 

Theorem 5.1 (Lewittes-Geil-Matsumoto bound). Let X be a curve over Fg, 
Q a rational point and H be the Weierstrass semigroup of Q. Then 

#A(Fg) < #{H \ {qH* + H)) + l<qv 2 + l 
where V 2 is the multiplicity of H. 

Proof. Let A’(Fg) = [Q, Pi,..., P^}, V = {Pi,...,p„}, and consider the 
one-point codes C{X,D,mQ). Then ffX{¥q) = n = #M. By Corollary 13.141 
M C H \ {qH* + H). Taking cardinalities we obtain the first inequality. To see the 
second one, note that qv 2 + H C qH* + H and according to Lemma 13.81 we have 
ff{H\{qv2 + H)) = qv2. □ 

The bound ffX{¥q) < ff{H\{qH*+H)) + l was stated by Geil and Matsumoto, 
[20| . improving the previous result ffX{¥q) < qv 2 + 1 obtained by Lewittes, |29j . 

5.2. Castle curves. Let T be a curve over Fg. A is called Castle is there 
exists a rational point Q G A(Fg) such that: 

(1) the Weierstrass semigroup of Q, H{Q) is symmetric; and 

(2) the number of rational points on X reaches the Lewittes bound ffX{¥q) = 

qv2{Q) + 1 

where V 2 {Q) is the multiplicity oi H{Q). 
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Example 5.2. Some of the curves previously discussed in this chapter are 
Castle. 

(1) A rational curve is clearly a Castle curve. 

(2) The Hermitian curve T-L over F^2 is a Castle curve. Let Q be the point at infinity. 
The Weierstrass semigroup H = (g, g + 1) is symmetric of multiplicity V 2 = q and 
#A(F,2)=g3 + l. 

(3) The Suzuki curve S is Castle. Let Q be the point over x = oo. The Weierstrass 
semigroup of Qj H{Q) = {q,q-\-qQ,q-\-2qQ,q-\-2qQ + \) is telescopic (see [27]'). hence 
symmetric of multiplicity V 2 = q- Since S has + 1 rational points, it is a Castle 
curve. 

Many of the most interesting curves for Coding Theory purposes are Castle. 
Let us see other examples. 

Example 5.3. Let A be a hyperelliptic curve and Q a hyperelliptic rational 
point. X is Castle if and only if Q is the only rational hyperelliptic point on X and 
X attains equality in the hyperelliptic bound ^{rational nonhyperelliptic points} + 
2#{rational hyperelliptic points} < 2g + 2. 

Example 5.4 (The Norm-Trace curve). Let us consider the curve defined over 
Fqr by the affine equation 

2 .(9''-1)/(<J-1) = yq^-^ + yq"-^ +...+y 

or equivalently by |f, (x) = |f, (?/)) where the maps N and T are respectively 

the norm and trace from F^r to F^. This curve has 2^'’“^ -|- 1 rational points and 
the Weierstrass semigroup at the unique pole Q of a; is given by 

HiQ) = {q^-\{q^-l)/{q-l)). 

Since every semigroup generated by two elements is symmetric, this is a Castle 
curve. Codes on these curves have been studied by Ceil in |18j . where the reader 
can find proofs and details. 

Example 5.5 (Generalized Hermitian curves). For r > 2 let us consider the 
curve Xr over F^r defined by the affine equation 

y'^ + ... + y'^ + y = + ... + x‘^ 

or equivalently by Sr,i{y, y'^, •.., ) = Sr,2(a:, x'^,... ,x'^ ), where and Sr ,2 

are respectively the first and second symmetric polynomials in r variables. Note 
that X 2 is the Hermitian curve. These curves were introduced by Garcia and 
Stichtenoth in mi. They have q^^ ^ -I- 1 rational points. Let Q be the only pole 
of X. Then H{Q) = {q‘^~^,q^~^ + q^~^,q^ + 1). This semigroup is telescopic and 
hence symmetric (see e.g. [27j'). Therefore, Xr is a Castle curve. AG-codes based 
on these curves were studied in (binary case) and [40j (general case). 

The next proposition states a fundamental property of Castle curves. 

Proposition 5.6. Let X be a Castle curve with respect to a point Q S A’(Fg). 
Write X{¥q) = {Q, Pi ,..., P„} and let D = Pi + ■ ■ ■ + Pn- 

(1) Let f € C{ooQ) be such that v{f) = V 2 - For every a € ¥q we have 
div(/ — a) = Da — V 2 Q with 0 < Da < D. 

(2) D - nQ. 
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Proof. (1) The morphism f : X ^ has degree V 2 hence < V 2 for 

all a G ¥q. Since #A’(Fq) = qv 2 we conclude that = V 2 - Then there exist 

exactly V 2 points P G 'T(Fq) such that f{P) = a. (2) Consider the one-point codes 
C{X,D,mQ) and the function cj) = ft — f. v{(l)) = qv 2 = n and (/'(Pi) = 0 for all 
Pi. Then (j) G C{nQ — D) hence D ^ nQ. □ 

Corollary 5.7. Let X he a Castle curve of genus g with respect to a point Q G 
A’(Fg). Let X{¥q) = {Q,Pi,... .,Pn} and D = Pi + -■ ■ + Pn. Then {n+2g — 2)Q — D 
is a canonical divisor. 

Proof. {n+2g — 2)Q — D ^ {2g — 2)Q. Since H is symmetric this is a canonical 
divisor. □ 

Remark 5.8. Let cj) be the function defined in the proof of Proposition [521 It 
can be proved that the differential form uj = d(j)/(f> has simple poles and residue 1 
at all points Pt. So w is the differential form for which we asked in Proposition 

Let us remember that by 7 ^ we denote the r-th gonality of X over Fg. 

Proposition 5.9. Let X be a Castle curve with respect to a point Q G <T(Fq) 
with Weierstrass semigroup H = {ui = 0, U 2 ,... }. If the multiplicity at Q satisfies 
T 2 < <7 + 1 , then 

( 1 ) 7 i < Vi for all i = 1,2,.... 

( 2 ) 72 = U 2 . 

(3) ')i = Vi for i> g -"f 2 + 2. 

Proof. (1) Follows from the definition of gonality. (2) There is a non-constant 
morphism of degree 72 from X to the projective line. Then qv 2 -I- 1 = #A’(Fg) < 
72 ( 9 - 1 - 1), so {qv 2 + l)/{q + 1) = U 2 - {v 2 - l)/( 9 + 1) < 7 < V 2 . By our hypothesis 
V 2 < 9+1) it holds that (u 2 — l )/(9 + 1) < 1 and we get the equality. (3) The 
statement about the gonalities of high order follows from the fact that both, the 
semigroup H and the set of gonalities GS{X) = (jr)r>i verify the same symmetry 
property: for every integer t, it holds that t G H (resp. t G GS(X)) if and only if 
2g-l-t^ H {resp. 2g-l-t^GS{X)). □ 

5.3. Codes on Castle curves. Let X he a Castle curve of genus g over 
Fq with (n -I- 1) Fq-rational points, X{¥q) = {Q,Pi ... ,Pn}. A Castle code is 
a one-point code C{X,D,mQ) constructed from X and V = {Pi,...,P„}. Let 
H = H{Q) = {0 = < V 2 < ...} be the Weierstrass semigroup of Q. The 

dimension set M can be easily obtained: by Propositions 14.lOl and 1521 M = {to G 
H : m < n}U{n + li,..., n+lg} = H\{n + H). Define the function t = tg : Nq —>■ N 
by i{m) = maxji : Vi < to}. Note that /.(to) = £(jnQ). 

Proposition 5.10. Let m be a nonnegative integer. The Castle code C{X,D, 
mQ) has dimension k = /.(to) — /.(to — n) and abundance i{m — n). 

We now turn to the minimum distance. 

Proposition 5.11. LetC{X,D,mQ) be a Castle code. Then 

(1) for 1 < m < n, C{X,D,mQ) reaches Coppa bound if and only ifC{X,D, 
(n — m)Q) does. 

(2) For 1 < r < 9 — 1, d{C{X, D, rv 2 Q) = n — rv 2 ■ 

(3) For n — V 2 < m < n, d{C{X, D, mQ) = V 2 . 
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Proof. (1) As seen in Proposition 14.21 C{X,D,mQ) reaches equality in the 
Goppa bound if and only if then there exists D',0 < D' < D such that mQ ^ D'. 
Let D" = D — D'. Thus mQ ^ D — D" ^ nQ — D”, hence (n — m)Q ^ D" and the 
code C{X, D, {n — m)Q) also reaches equality in the Goppa bound. (2) Follows from 
Propositions 14.21 and 15.61 11. (3) V 2 = d{C{X,D,{n — V 2 )Q) > d{C{X,D,mQ) > 
d{C{X, D, nQ) > V 2 - The first equality comes from item (2) of this proposition and 
the last inequality is the improved Goppa bound on the minimum distance. □ 

Example 5.12. The bound doRD was computed for codes on the Suzuki curve 
over Fg in Example 14.131 In particular we found the result d{C{S, D, 62Q)) > 
d{C{S, D,63Q)) > 6. By using Proposition 15.111 we get now d\c\s, D, 62Q)) = 
d{C{S, D,63Q)) = 8. So this last one is a [64,50,8] code and again we the get 
a code with the best known parameters according to |34j . Furthermore this fact 
shows that the bound doRD does not always improve on the improved Goppa bound 
d{C{X,D,mQ)) > n-deg(G)+ 7 a+i. 

The cardinalities #A* can be now computed in a simple way. 

Lemma 5.13. For Castle codes it holds that M = {m G H : n+2g—l — m G H}. 
As a consequence, mn-r+i = n + 2g — 1 — for r = 1,..., n. 

Proof. Let m G H. From Riemann-Roch theorem, £{mQ—D) = m—n+l—g+ 
£{{n+2g—2—m)Q), hence l{mQ) = £{{rn—\)Q) if and only if £{{n+2g—2—m)Q) — 
£{(n + 2g — 1 — m)Q), that is if and only if n + 2^ — 1 — m S H. The conclusion 
mn+i-r = n -\- 2g — 1 — is clear. □ 

For i = 1,... ,n, lei Li = mi + Gaps(iL) = {mi + li,... ,mi + lg\. 

Proposition 5.14. For Castle codes, #A* = n - i + 1 - #(Li n M). 

Proof. Since M = {m G H : m < n} U {n + h,..., n + Ig} = H \ {n + H) and 
H is symmetric, we have M = {0 ,... ,n + 2g — 1} \ L, where L = {li,... ,lg,n + 
2g — Ig — 1,... ,n + 2g — li — 1}. For i = 1,...,n, let 

Ui = {mj G M : mi + mj < n + 2g, mi + mj ^ M}, 

Vi = {mj G M : mi + mj > n + 2g}. 

Glearly #A* = ff{mj : mi + mj G M} = #(M \ {Ui U V^)) = n - #Ui - #1^. 

Since M C F[, we have Ui = {mj G M : mi + mj G L} = {n + 2g — 1 — Ig — 

mi,... ,n + 2g — 1 — li — mi} fl M. According to Lemma [5.131 ffUi = #(Li H M). 
Besides ffVi = i — In fact, if mi + mj > n + 2g, from Lemma l5.131 we can write 
mj = n + 2g — 1 — mt with t = n — j + 1. Then n + 2g — 1 + mi — mt > n + 2g — 1 
if and only if > mt and there exists i — 1 such choices for mt. □ 

Then for Castle codes we have 

d{C{X, D, mkQ)) > doRoik) = min{n — r + 1 — #(Lr- H M) : r < k}. 

Example 5.15 (Hermitian codes). The minimum distances of Hermitian codes 
C{T-L,D,mQ) were computed in Example 14.81 for m in the range 0 < m < n — q^. 
We shall study now the case n — q^ < m < n. Note that all m in this range are pole 
numbers and n — m < n — q^. Write m = n — aq — b with 0 < a,b < q. li b < a then 
n — m G H hence Proposition 15.111 11 and Example 14.81 ensure that C{'H,D,mQ) 
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reaches the Goppa bound, d{C{'H, D,mQ)) = dG{C{'H,D,mQ)) = n — m = aq + b. 
If 6 > a, then 

d{C{'H, D,{n — aq — a — 1)Q)) < d{C{'H, D, (n — aq — b)Q) 

< d{C{'H, D, (n - (a + l)q)(5)) = (a + l)g. 

A straightforward computation using Proposition [5d4] shows that 
doRoiCCH, D,{n - aq - a - 1)Q)) = (a + l)q 
so we get equality, d{C{'H, D, {n — aq — b)Q)) = (a + l)q. 

Finally we sate a duality property of Castle codes. As a consequence of Propo¬ 
sitions |4^ lAM] and Corollary 15.71 we have the following. 

Proposition 5.16. For Castle codes, there exist x S (Fp" such that C{X,D, 
RT-kQ)^ = X * C{X, D,{n + 2g — 2 — mk)Q) for all k = 1,... ,n. 

Codes verifying the duality relation of the above proposition are called isometry 
dual. Let B — {bi,..., b„} be a basis of such that C{X, D, rrirQ) = (bi,..., b^.), 
r = 1,..., n. A vector x G (Fp" providing the isometries stated in the proposition 
can be explicitly obtained from the duality relations, which lead to the system of 
linear equations (b^ * bj) • x = 0, i -I- j < n. 

Since isometric codes have equal minimum distance, we can obtain estimates 
on the minimum distance of Castle codes by using both the order and dual order 
bounds. It can be proved that both bounds give the same result. 


Proposition 5.17. For Castle codes we have = #A*, r = 1,..., n. As 

a consequence 

doRD{C{X,D,mkQ)) = T[Aa.{4fNf : r = n - fc,..., n - 1}. 


Proof. According to Lemma [5.131 for Castle codes it holds that rrin+i-r = 
n + 2g — 1 — mr- Then 


— ^{(b j) • RR'i T — Rkn—r+l} 

= j) ■ RT-r + mj = nin-i+l} 

= M{Rj)-R^r + RRj&M} 

= *K- 


The conclusion is clear. 


□ 


5.4. Bibliographical notes. Castle curves and codes were introduced in |38j 
and generalized in |39j . The computation of doRD for some Castle codes (including 
all Hermitian and Suzuki codes) can be found in the article |42j . For Hermitian 
codes this bound provides the true minimum distance of C{'H, D,mQ) for all to, 
see [27j . Such distances were first computed by K. Yang and P.V. Kumar in m 
(without using order bounds). 


6 . Feng-Rao decoding 

In this section we show a very general decoding method for codes Ck belonging 
to chains, as those treated in Section [2j Keeping the notations used in that section, 
let B — {bi,..., b„} be a basis of F” and Cr = (bi,..., b^), r = 1, ..., n. By using 
the information given by the whole chain Cq = (0) C Ci C • • • C C„ = F” we can 
decode Ck- 
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If these codes are one-point AG codes, Cr = C{X,D,mrQ), then we take the 
basis vectors bi = b„ = ev{(j)n), where v{(pr) = rrir, as treated in 

previous sections. 

6.1. Preparation step. Our decoding algorithm works for dual codes, hence 
we first consider a dual basis T* = {hi,...,h„} of F” verifying 



0 ifi-|-j<n-|-l 

^0 ifz-|-j=n-|-l 


where • stands for the usual inner product in . These conditions imply the duality 
relations 


(hi,...,h„_r) =C^ = (bi,...,br)"^ 


or equivalently (hi,..., hj.)-*- = Cn-r for all r = 1,..., n. If the chain Cq = (0) C 
Cl C • • • C = F^ verifies a duality relation C:^ = Cn-r, r = 0,... ,n, then we take 
hi = bi. If the chain verifies an isometry-dual relation = x * Cn-r, r = 0,..., n 
(the case of Castle codes), then we take hi = x * bi, i = 1,..., n. 

Once the basis V has been fixed, we consider the dual chain 


C^ = (0) c C^_^ C • • • C C^+i C C^ C • • • C Co^ = F” 


and let px> : F'‘ —>• { 0 ,..., n} be the sorting map relative to the basis V, defined by 
P'd{'v) = minji : v G (hi,..., hi)} if v 7 ^ 0 . A pair of basis vectors (hr, hs) is well¬ 
behaving with respect to 2 ? if for all (i,j) ^ (r, s) we have p-E)(hi *hj) < pD(hr*hs). 
Remember that for r = 0,1,..., n — 1, we define the sets 

Nr = {{hj) ■ (hi,hj) is well-behaving with respect to V and p-v{hi * h^) = r -|- 1 }. 

All these sets are precomputed in the preparation step. The dual order bound 
with respect to stated in Theorem 12.71 ensures that the minimum distance of 
Ck = (hi,...,satisfies d{Ck) > 5 = min{#A^r : r = n — k,... ,n — 1}. We 
can decode Ck up to (d — l )/2 errors by using majority voting. 

When we consider one-point AG codes then we can manage the sets N* in¬ 
stead of Nr- If these codes are Castle, Proposition 15.171 implies that the Feng-Rao 
algorithm corrects errors of weight up to one half the order bound. 

6.2. Syndromes. Let u = c -|- e be a received word, where c G Cfc and e is 
the error vector. Assume wt{e) < {S — l)/2. To decode u we shall compute the 
syndromes 


Si — hi * e,..., Sn — h^ ■ e. 


Consider the matrix H whose rows are the vectors hi,..., h„. H has full rank n 
and He^ = s^, where s = (si,...,s„). Once all one-dimensional syndromes Si 
are known we can deduce the error vector by solving a system of linear equations. 
Note that si,..., Sn-k can be derived from u: as C^ = (hi,..., h„_fc), for i = 
1 ,..., n — /c, we have 

h, • u = h, • (c-be) = h, - e = s,. 

In order to compute Sn-k+i, ■ ■ ■, Sn, we shall use two-dimensional syndromes 

Srt = (hr * ht) • e, 1 < r, t < n. 

Let S be the matrix S = (srt), 1 < r, t < n. As seen in Section 12.41 this matrix 
can be written also as S = HD(e)H^, where D(e) is the diagonal matrix with e 
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in its diagonal. Since H has full rank, we have rank(S) = rank(D(e)) = wt(e). For 
1 ^ ^ ^ let us consider the submatrix of S 

S(*, j) = (sr-t). ^ <r <i,l <t < j. 

An entry (i,j) is a discrepancy of S if rank(S(z — l,j — 1)) = rank(S(z — l,j)) = 
rank(S(z, j — 1)) and rank(S(i — 1, j — 1)) rank(S(*, j)). Clearly the total amount 
of discrepancies in S is rank(S) = wt{e). 

6.3. Computing unknown syndromes. Assume that si,..., s; are known 
and Si+i is the smallest unknown syndrome. Let {i,j) G Ni. The well-behaving 
property implies that for each (r, t) ^ (cj) we have pT>i)^r * hj) < pi)(hi * hj) = 
I + 1. Then there exist Ai,..., A/ such that * hj = Aihi -I- • • • -f A/h; and 
Srt = AiSi -I-• • - -I-A/S/. Thus the matrices S(i — 1, j — 1), S(i — 1, j) and S(i — 1, j — 1) 
are known. If these three matrices have equal rank, then {i,j) is called a candidate. 
Let K be the number of discrepancies in the known part of S. If (r, t) is a known 
discrepancy, then all entries (r, t') and (r',t) with r' > r,t' > t are noncandidates. 
Conversely, if {i,j) G Ni is not a candidate then there exists a known discrepancy 
in its same row or column. Thus the number of pairs {i,j) G Ni which are not 
candidates is at most 2K. If wt{e) < {^Ni — l)/2, then 

number of candidates > #A^/ — 2K > =f^Ni — 2wt{e) > 0 

and there always exist candidates. Let (z, j ) be one of them. There is a unique value 
sL of entry (z, j) such that rank(S(z — 1, j — I)) = rank(S(z, j)). The candidate (z, j) 
is called true if sC = and false if sC Sij. Since s/+i is unknown, then so is 
Sij and we cannot check in advance whether a candidate is true or false. However, 
a candidate {i,j) is false if and only if it is a discrepancy, hence there are at most 
wt{e) false candidates in S. As wt{e) is ’small’, most candidates will be true. Let 
us formalize this idea. 

Let T and F be respectively the number of true and false candidates in Ni. 
Since a false candidate is a discrepancy and the total number of discrepancies is 
wt(e), we have K + F < wt{e) < {ffNi — l)/2. Combining this inequality with 

ffNi = ^candidates -I- #noncandidates < (T -|- F’) -|- 2K 

we obtain F < T and the majority of candidates are true. 

For each candidate (z, j), compute sC and suppose Sij = s'^. This assumption 
leads to a predicted value of s/+i as above: since pr)(h/ * h^) = Z -|- 1, we can 
write = Aihi-|-- • •-|-A/+ih/+i with A/+i ^ 0. Then = AiSi-|-- • --t-Az+iSz+i. 

Define the vote of (z, j) as = A;”j_j^(sC — AiSi — ■ ■ ■ — A/s/). 

Compute the votes of all candidates (z,j) G Ni. Since the majority of candi¬ 
dates are true, we can derive the correct value of s/+i as the most voted among all 
candidates. 

Once this value is known we proceed to the next unknown syndrome. If 
wt{e) < {S — l)/2 then wt{e) < {ffNi — I)/2 for all Z = n — fc,..., n — 1 and 
all syndromes Sn-k+iT ■ ■ ^ Sn can be computed. Assuming that all these sets Ni 
have been precomputed, the complexity of this algorithm is that of solving a linear 
system of n equations in n unknowns, that is O(n^). 

6.4. Bibliographical notes. The idea of using majority voting for unknown 
syndromes is due to G.L. Feng and T.N.T. Rao |12j and 1. Duursma, [8]. The 
original algorithm was designed for duals of primary AG codes. A full and nice 
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description for duals of codes coming from order domains can be found in [27) . A 
generalization to a broad class of codes, including primary codes, was done in [ 21 j . 
Our presentation is a mixture of these two works. 

Decoding AG codes is a very active area of research today. General AG codes 
C{X,D,G) can be decoded by several methods. Here we just cite the nice report 
[4] by Beelen and Hpholdt, which is close to the ideas presented in this chapter. 


6.5. An example. Let us consider the Hermitian curve TL : + y = 

defined over the field F 4 = { 0 , 1 , a, a^}, where 1 + a = o?. % has genus 1 and nine 
rational points, namely Q = (0 : 1 : 0 ) and the eight affine points 


Pi = (0,0), P 3 = (l,a), P 5 = («,«), P 7 = {a'^,a), 

P 2 = (0,l), P4 = {l,a^), P6 = {a,a^), Ps = {a^,a'^). 

Let P = {Pi,...,P 8 } and consider the codes C{'H,D,mQ), m = 0, ...,9. The 
Weierstrass semigroup oi Q is H = (2,3) = {0, 2,3, —>■}, and the dimension set is 
M = {0, 2,3,4, 5, 6 , 7, 9}. Then, a basis B of F® is then given by the vectors 


bi 

= ev-p(l) 

= (1, 

1 , 

1 , 

1 , 

1 , 

1 , 

1 , 

1 ) 

b2 

= ev'p{x) 

= ( 0 , 

0 , 

1 , 

1 , 

a. 

a, 

c?, 


ba 

= avviy) 

= ( 0 , 

1 , 

a, 

a^, 

a, 

c?-, 

a. 


b4 

= ev'p{x‘^) 

= ( 0 , 

0 , 

1 , 

1 , 


c?-, 

a. 

a) 

bs 

= ev-pixy) 

= ( 0 , 

0 , 

a, 



1 , 

1 , 

a) 

be 

= ev'p{x'^) 

= ( 0 , 

0 , 

1 , 

1 , 

1 , 

1 , 

1 , 

1 ) 

b? 

= ev-p{x'^y) 

= ( 0 , 

0 , 

a, 


1 , 

a, 


1 ) 

bs 

= ev-p{x^y) 

= ( 0 , 

0 , 

a, 


a, 

0 ?, 

a. 



In view of the duality property of Hermitian codes we can take P = B. Gonsider 
the code C = C{'H,D, 3Q) of dimension 3. A direct computation gives 

At ={(1,1), (1,2), (1,3), (1,4), (1,5), (1,6), (1,7), (1,8)} 
a; =1(2,1),(2,2),(2,3),(2,4),(2,5),(2,7)1 

A* =1(3,1), (3,2), (3,3), (3,4), (3,6)1 

N; =1(1, 6 ), (2,4), (3,3), (4,2), ( 6 ,1)1 

N; = 1(1, 7), (2,5), (3,4), (4,3), (5,2), (7,1)} 

N; = 1(1, 8 ), (2, 7), (3, 6 ), (4,5), (5,4), ( 6 ,3), (7,2), ( 8 ,1)} 

hence both, the order and dual order bounds, ensure d{C) > 5, which is the true 
minimum distance of C according to Example 14.81 Then it can correct up to 2 
errors. 

Since fc = 3, the code C allows us to encode 3-tuples z G F® by 8 -tuples 
c G C. Suppose we want to transmit the message z = (1,1,1). It is encoded 
as c = Ibi -I- lb 2 -I- lbs = (1, 0, a, a^, 1,0, 0,1). Suppose we receive the word 
u = (0, 0, a, 1,1,0, 0,1) with error e = (1,0, 0, a, 0, 0,0, 0). To decode c we first 
compute the known one-dimensional syndromes of e 

Si = bi • e = a^, S 2 = b 2 • e = a, S 3 = ba • e = 1 , S 4 = b 4 • e = a, S 5 = bs • e = 1 . 
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The smallest unknown syndrome is se- Using the information given by si,..., ss 
and fVg, the known part of S is 

a 1 a 1 * 

a a 1 * 

11 * 
a * 

1 
* 


where the entries in are marked with *. Since rank(S(2,2)) = 2 there is a 
unique candidate: (3,3). As Sg g = and ba * ba = ba + be, it votes for se = 
S 3 3 — S 3 = + 1 = a. 

Once this syndrome is known let us compute sy. We first update the matrix 

j'a^a 1 ala* 

a a 1 a * 

1 1 a^ * 

a a * 

1 * 
a 
* 

As above, the entries in A^g are marked with *. Candidates are (3,4) and (4,3). 
A simple computation gives S 3 4 = 1 ,S 4 3 = both vote for sy = 1. Let us 

compute sg. The current form of S is 

a 1 a 1 al* 

a a 1 a 1 a * 

1 1 1 * 

a a 1 a * 

1 1 a^ * 

a a * 

1 * 

* 

Candidates are (3, 6 ), (4,5), (5,4) and (6,3). We get Sg g = 1 ,S 4 5 = = 

1, Sg 3 = 1. All of them vote for sg = 1. 

Once all one-dimensional syndromes are known, we deduce the error vector e 
by solving the system si = bi • e,... , s„ = b„ • e. In our case, as expected, e = 
(1,0, 0, a, 0,0, 0,0), hence c = u — e = (0,0, a, 1,1, 0,0,1) — (1,0, 0, a, 0, 0,0, 0) = 
(1,0, a, c?, 1,0, 0,1). Finally we write c as a linear combination of by, b 2 , bg, ob¬ 
taining c = bi -f b 2 -f bg. The original message was z = (1,1,1). 
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